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Amended claims 

1. (Currently Amended) A system used by a first application for 
managing user access to at Jeast one of a plurality of network compatible applications, - 
comprising: 

an authentication processor for, 

receiving user identification information including a user 

identifier and 

initiating authentication of said user identification information 
using an authentication service; and 

at least one communication processor for, 

communicating an authentication service identifier and a 
corresponding user identifier to a managing application, said authentication service 
identifier identifying an authentication service used to authenticate identification 
information of said corresponding user and 

automatically communicating application specific context 
information in a data field of a UR L separately from session identification 
information, to a second application of said plurality of network compatible 
applications in response to a user command to initiate execution of said second 
application and in response to authentication of said user identification information 
said application specific context information supporting acquisition from said second 
application of information associated with a current operational context of said first 
application . 
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2. (Currently Amended) A syst e m accordin g- to claim 1, 

A system used -by a first application for managing user access to at least one of a 
plurality of network compatible applications, comprising: 
an authentication processor for. 

receiving user identification information including a user 

identifier and 

initiating authentication of said us er identification information 
using an authentication service: and 

at least one communication processor for. 

communicating an authentication service identifier and a 
corresponding user identifier to a managing application, said authentication service 
identifier identifying an authentication service used to authenticate identification 
information of said corresponding user and 

automatic application specific context 

information in a data field of a URL to a second application of said plurality of 
network compatible applications in response to a user command to initiate execution 
of said second application and in respjBnse_to_authentication of said user identification 
information wherein 

said application specific context information comprises at least one of, 
(a) a user identifier and (b) a patient identifier and 

said ^communication processor of said at least one communication 
processor encrypts sate an address portion of said URL and incoiporatejv- said 
encrypted address portion of said URL, together with said address portion of said 
URL in non-encrypted form, into a single processed URL data string. 

3. (Currently Amended) A system according to claim 1, wherein 

said application specific context information comprises a patient 

identifier, 

sakl ^communication processor of said at least one communication 
processor also communicates a session identifier identifying a user initiated session of 
operation of said first application to said managing application and 

said user identification information includes a password associated 
with said user identifier. 
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4. (Currently Amended) A system according to claim 1, wherein 

&a& a_communication processor of said at least one communication 
processor communicates said authentication service identifier and said corresponding 
user identifier to a managing application for compilation of a database. 

5. (Original) A system according to claim 4, wherein 

said database is accessible by other applications of said plurality of 
network compatible applications for mapping a non-authenticated user identifier of a 
participant application to an authenticated and different user identifier of another 
application. 

6. (Currently Amended) A system used for processing user access to 
network compatible applications, comprising: 

an authentication processor for, 

receiving authentication service identifier and corresponding 

user identifier data pairs from at least one of a plurality of applications, 
compiling a database using said data pairs, 
mapping a non-authenticated user identifier of a second 

application to an authenticated different user identifier of a first application using said 

database; and 

at least one communication processor for, 

communicating said authenticated different user identifier to 
said second application and 

automatically communicating application specific context 
information in a data field of a UR L separately from session identification 
information, to said second application in response to a user command to initiate 
execution of said second application, said application specific context information 
sunportinj^acquisitionjfcom said .second_application_of information associated with a 
current operational context of said firet application . 

7. (Original) A system according to claim 6, wherein 

said authentication service identifier identifies an authentication 
service used to authenticate identification information comprising a user identifier of 
said corresponding user to provide an authenticated user identifier. 
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8. (Previously Presented) A system according to claim 6, wherein 
said authentication processor performs said mapping using said 

database by matching an authentication service identifier of said second application 
with an authentication service identifier of said first application and providing said 
authenticated different user identifier of said first application as a mapped user 
identifier. 

9. (Currently Amended) A system according to claim 6, including 

an input processor for receiving a session identifier identifying a user 
initiated session of operation wherein 

said at least one communication processor encrypts sm4 an address 
portion of said URL and incorporates, said encrypted address portion of said URL, 
together with said address portion of said URL in non-encrypted form* into a single 
processed URL data string and provides a key supporting decryption of said encrypted 
address portion?- to a destination system. 

10. (Original) A system according to claim 6, wherein 

said first application is a parent application and said second application 
is a child application and 

said authenticated different user identifier of said first application is 
used by said second application eliminating the need for said second application to 
authenticate a user identifier. 

1 1. (Currently Amended) A system according to claim 6, wherein 
said a communication processor of said at least one communication 

processor communicates a parameter to said second application, said parameter 
identifying success or failure of said mapping. 

12. (Original) A system according to claim 6, wherein 

said authentication processor receives an authentication service 
identifier and corresponding user identifier data pair from said first application and 

said first application is a parent application and said second application 
is a child application. 

13. (Original) A system according to claim 6, wherein 

said authentication service identifier employs a predetermined data 
format for use by said plurality of applications in constraining size of said database. 
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14. (Currently Amended) A system used for processing user access to 
Internet compatible applications, comprising: 
an authentication processor for, 

receiving an authentication service identifier and corresponding 
user identifier from a parent application, and 

mapping a non-authenticated user identifier of a child 
application to an authenticated different user identifier of said parent application; and 
at least one communication processor for, 

communicating said authenticated different user identifier to 
said child application and 

automatically communicating application specific context 
information in a data field of a UR L separately from session identification 
information, to said child application in response to a user command to initiate 
execution of said child application and in response to communicating said 
authenticated different user identifie r, said application specific context information 
supporting acquisition from said child application of information associated with a 
current operational context of said parent application. 

15* (Original) A system according to claim 14, wherein 
said parent application establishes a session of user operation and 
said child application uses said authentication system to participate in 
said session of user operation. 

16. (Original) A system according to claim 14, wherein 

said authentication processor compiles a database using data pairs 
comprising an authentication service identifier and corresponding user identifier and a 
data pair is received from individual applications of a plurality of concurrently 
operating Internet compatible applications and 

said authentication processor uses said database in mapping said non- 
authenticated user identifier of said child application to said authenticated different 
user identifier of said parent application. 

17. (Previously Presented) A system according to claim 16, wherein 
said authentication processor performs said mapping using said 

database by matching an authentication service identifier of said child application 
with an authentication service identifier of said parent application and providing said 
authenticated different user identifier of said parent application as a mapped user 
identifier, 
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18. (Original) A system according to claim 14» wherein 

said authentication service identifier identifies an authentication 
service used to authenticate identification information comprising a user identifier of 
said corresponding user to provide an authenticated user identifier. 

19. (Currently Amended) A system according to claim 14, wherein 
said application specific context information comprises a patient 

identifier and 

said authenticated different user identifier of said parent application is 
used by said child application eliminating the need for said child application to 
authenticate a user identifier, 

20. (Original) A system according to claim 14, wherein 

access to said child application by a user is enabled by said child 
application in response to receiving said authenticated different user identifier without 
a subsequent re-entry of user identification information via a logon menu. 

21. (Currently Amended) A method used for processing user access to 
Internet compatible applications, comprising the activities of: 

receiving an authentication service identifier and corresponding user 
identifier from a parent application, and 

mapping a non-authenticated user identifier of a child application to an 
authenticated different user identifier of said parent application; 

communicating said authenticated different user identifier to said child 
application; and 

automatically communicating application specific context 
information in a data field of a UR L separately from session identification 
information, to said child application in response to a user command to initiate 
execution of said child application and in response to communicating said 
authenticated different user identifie r, said application specific context information 
supporting acquisition from said child application of information associated with a 
current operational context of said parent application . 
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22. (Previously Presented) A method according to claim 21, including 
the activities of 

receiving data pairs, comprising an authentication service identifier 
and corresponding user identifier, from individual applications of a plurality of 
concurrently operating Internet compatible applications, 

compiling a database using said data pairs, and 

using said database in mapping said non-authenticated user identifier 
of said child application to said authenticated different user identifier of said parent 
application. 

23. (Currently Amended) A method used by a first application for 
managing user access to at least one of a plurality of network compatible applications, 
comprising the activities of: 

receiving user identification information including a user identifier; 

initiating authentication of said user identification information using 
an authentication service; 

communicating an authentication service identifier and a 
corresponding user identifier to a managing application, said authentication service 
identifier identifying an authentication service used to authenticate identification 
information of said corresponding user; and 

automatically communicating application specific context information 
in a data field of a UR L separately from session identification information, to a 
second application of said plurality of network compatible applications in response to 
a user command to initiate execution of said second application and in response to 
authentication of said user identification information , said application specific context 
information supporting acquisition from said second application of information 
associated with a current operational context of said first application . 
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